Working to narrow the breach-to-detection gap for better security

Overview

Compliance is indeed a conscientious effort toward securing corpo¬rate assets. Over the past decade, IT organisations have committed much time and money to the cause-whether conforming to internal standards or mandates from regulatory bodies.

But are they focused on security, or just passing an annual test? Certainly, regulatory compliance does not guarantee security. Some mandates don't even reflect the current threat environment; and available technology is often light-years ahead of regulatory specifications.
In fact, despite best-effort compliance programs, security breaches are still happening.